Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File: hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier: 7dDNHkFDFmjJkkYKCSvuwhdFQ54vS6L0GVuRBImq4qM=
Subject key identifier: 49:B0:12:04:33:DB:FB:D0:26:13:9F:8E:21:C5:2C:0A:D9:3B:43:15
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 0198D6CD4D7767275289E1A77CBFA66098AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 12:00:35 +0000
Manifest this update: Sat 23 Aug 2025 12:00:35 +0000
Manifest next update: Sun 24 Aug 2025 12:00:35 +0000
Files and hashes: 1: 2d0NREbfTK2FI7htmEEh4N4XLQs.roa (hash: EflrGXNj+c0/KROiAUAdkvP3FPssOcN4j+Wc2GCNRt8=)
2: RN4snQmQ10sMC0pt3uecgVuseDw.roa (hash: Sf04OwdvE8nAZA8tEzv2sgqcn/Ip+2j+x7sXM2qpNDA=)
3: TMFEuWpJtp-N546RTZSeOr_ihcc.roa (hash: 15tgIF1xV8iqz3lwud0LDIWMxNL1aGMOQ99+FVGNT5o=)
4: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: u+MZBdgzIDsYqsGRh3PJHGW21DuuzfHlqA0uZ81V/2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:4d:77:67:27:52:89:e1:a7:7c:bf:a6:60:98:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Aug 23 12:00:35 2025 GMT
Not After : Aug 24 12:00:35 2025 GMT
Subject: CN=49b0120433dbfbd026139f8e21c52c0ad93b4315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:3e:fc:81:68:85:3e:be:08:a5:01:60:f0:
77:ba:70:d3:4e:4a:a6:49:67:34:49:ff:3c:d1:48:
25:24:6d:c0:4e:f9:de:31:e8:f7:7b:8c:67:e1:80:
0a:7c:9b:11:33:18:e8:2d:a7:0e:95:80:45:05:a2:
76:0c:22:96:a3:d0:f6:a9:22:ab:68:72:46:46:40:
05:e5:5e:fe:29:1d:14:fd:b1:4c:a5:2a:19:1d:bc:
b5:68:72:77:26:e9:f5:86:48:ef:07:57:88:54:99:
37:f1:8b:25:81:7a:df:61:c6:69:5d:2c:fc:9e:fa:
44:77:a1:88:9c:8e:a2:cf:6e:fd:d6:1b:94:e6:58:
be:0e:d4:97:47:91:75:c0:9c:01:d9:30:06:73:61:
f2:99:69:dc:4a:93:36:79:c0:92:60:d8:43:ab:52:
a3:2e:23:57:62:30:e4:4d:45:0d:7f:90:d6:73:36:
ec:6e:ee:16:e4:3e:56:f6:c1:f4:c2:9b:ce:1d:10:
63:5e:73:92:5c:ae:b0:13:14:a0:29:7c:32:ec:bd:
c9:1c:62:65:e8:d8:88:e0:e0:8c:e9:de:ad:e4:c9:
1d:6f:60:6f:b5:e7:c1:9f:df:1d:25:99:ea:d1:17:
1b:a6:86:e7:b9:0b:a2:02:52:9b:3d:c6:96:ba:4d:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B0:12:04:33:DB:FB:D0:26:13:9F:8E:21:C5:2C:0A:D9:3B:43:15
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:52:37:1f:00:f1:64:fa:54:2a:dc:91:57:7a:e0:dc:21:61:
1b:a7:e8:72:bd:2a:df:31:20:04:59:11:47:98:76:55:5c:b1:
0a:0f:a8:e4:89:04:36:0e:7a:f0:77:81:88:b8:99:c0:b5:8e:
fa:c4:04:3f:e1:69:f5:e1:ce:21:ff:15:f1:5b:80:69:e5:d0:
40:7d:e5:bd:9e:61:e8:fc:2f:b5:7e:93:ee:26:ad:31:f2:63:
f5:6c:d2:3e:af:a6:46:c4:b9:55:54:45:6a:c0:d2:f3:e9:83:
9d:53:c9:78:4b:37:1a:ca:6c:ae:8f:85:e0:72:d4:23:9d:fc:
83:70:6a:58:8d:0b:19:4a:e3:5e:68:98:c2:5e:6d:cd:5a:ae:
d1:98:a4:e1:b0:12:c8:06:97:c1:38:46:69:c3:fb:2e:df:ca:
0c:a0:be:3e:45:18:8e:be:e1:f3:8a:db:43:5e:48:a3:1f:4b:
e6:2f:1d:14:b5:a1:e8:51:ab:d8:6d:6d:d2:ac:56:2e:ef:4c:
c8:46:97:d0:a2:ed:75:88:6f:44:a8:0b:5e:1e:57:24:40:46:
5f:cb:56:f7:ec:ae:fd:42:97:96:29:81:ea:60:4e:5a:23:60:
be:15:54:e3:3d:83:ac:b5:8e:b8:47:81:d6:1c:27:03:3e:b5:
33:7e:45:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:18 2025 by rpki-client